kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

CVE-2026-93192

A flaw was found in the Linux kernel's drm/v3d component. When the v3dfencecreate function fails within runjob callbacks, the queue-activejob is not properly cleared. This oversight leaves a dangling pointer, which could lead to memory corruption or a denial of service DoS condition...

subjack

subjack Escáner de Toma de Control DNS Subjack es un escáner de toma de control DNS escrito en Go, diseñado para escanear una lista de dominios de forma concurrente e identificar aquellos que pueden ser secuestrados. Gracias a la velocidad y eficiencia de Go, esta herramienta destaca especialment...

ghostbuster

Índice Índice Ghostbuster El problema Características del proyecto Instalación de Ghostbuster Uso de Ghostbuster Ejemplo de salida Configuración de tus cuentas AWS Configuración de Cloudflare Opcional Autores Licencia Ghostbuster Elimina IPs elásticas colgantes realizando análisis de tus recursos...

can-i-take-over-xyz

Aviso legal ⚠️ Los autores de este documento no asumen ninguna responsabilidad por la exactitud. Este proyecto solo está aquí para ayudar a guiar a los investigadores de seguridad a determinar si algo es vulnerable o no, pero no garantiza precisión. Este proyecto depende en gran medida de las...

tko-subs

tko-subs Esta herramienta permite: Verificar si un subdominio puede ser tomado porque tiene: un CNAME colgante que apunta a un proveedor de CMS Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. que puede ser tomado. un CNAME colgante que apunta a un nombre de dominio inexistente uno o m...

CVE-2026-108600

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

EUVD-2026-96392

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108600 open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108600

The open-multi-agent (@open-multi-agent/core) package (versions 1.5.0 through 1.21.2 ) is vulnerable to a link following vulnerability (CWE-59) within the file_write tool sandbox . This flaw allows an attacker to escape the workspace root and create files in unauthorized locations by using dangli...

CVE-2026-108600 open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

Linux Distros Unpatched Vulnerability : CVE-2026-98383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The...

CVE-2026-108600: Improper Link Resolution Before File Access

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

SUSE CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

DEBIAN-CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

CVE-2026-98383

In the Linux kernel , a vulnerability exists in the bpf subsystem where an LWT_SEG6LOCAL program can invalidate its cached SRH using bpf_lwt_seg6_adjust_srh() and subsequently call bpf_skb_pull_data(). This combination may cause bpf_skb_pull_data() to reallocate skb->head, leaving the per-CPU ...

PT-2026-108769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf component where an LWT SEG6LOCAL program can invalidate its cached Segment Routing Header SRH using the bpf lwt seg6 adjust srh function and subsequently call...